$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1dc960e7-1590-4f72-857b-d680ff4ade7a.roa File: 1dc960e7-1590-4f72-857b-d680ff4ade7a.roa (raw, json) Hash identifier: hvYxUtsTWKyeZgoFvdTLPFbUMjrPDPBVDEPng8lriEc= Subject key identifier: E6:C9:E3:A8:12:47:17:17:18:63:EE:90:9B:F4:5E:86:72:B1:B7:0A Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 1C64C0C087F14A8E2547B0B86642242A7509BAB4 Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1dc960e7-1590-4f72-857b-d680ff4ade7a.roa Signing time: Sat 26 Apr 2025 00:50:21 +0000 ROA not before: Sat 26 Apr 2025 00:50:21 +0000 ROA not after: Sat 31 May 2025 23:59:59 +0000 asID: 8987 IP address blocks: 2605:9cc0:547::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:64:c0:c0:87:f1:4a:8e:25:47:b0:b8:66:42:24:2a:75:09:ba:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Apr 26 00:50:21 2025 GMT Not After : May 31 23:59:59 2025 GMT Subject: serialNumber=8d965308b90d5ec9b4b2d5da1f2051320df2ef890873551823daf6db70389c2c, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4e:16:13:d8:c3:05:46:d0:a0:47:35:50:5e: 66:38:e9:78:ab:9d:fb:85:78:10:83:75:22:04:08: e9:3d:70:9d:34:a2:c7:15:be:86:8b:29:dc:dd:16: 17:6c:07:94:cc:65:e2:c7:b6:26:9d:17:8c:ea:cb: df:98:dc:41:00:07:58:92:df:82:ce:1f:0b:fb:a0: a8:c5:de:f6:3c:80:81:82:21:5e:ec:e1:d1:44:98: 68:d5:1e:e0:9c:61:1a:f2:3d:32:1c:a4:c8:65:a2: 47:58:62:d1:d8:30:d3:6d:67:58:99:6d:59:da:84: 02:63:8b:e2:8c:bb:7c:81:0d:84:06:46:4b:36:eb: 89:e9:b8:1c:8c:cc:0b:f2:7b:b2:dc:c2:80:e3:44: d3:76:83:9b:ec:8d:7a:a4:75:38:f7:58:21:16:30: 09:b2:2d:62:4f:02:71:88:0d:d3:6b:a6:70:c9:d4: 80:19:56:50:d5:52:a3:ce:0d:8b:84:97:c3:9a:f4: 7d:76:f1:ea:15:58:77:93:21:16:04:cb:cb:5a:07: d7:e2:8a:18:79:c2:67:fa:4b:4f:83:80:af:76:85: 6b:e9:17:aa:f1:63:c0:7c:31:9b:9f:aa:4f:67:d5: 36:7b:2e:93:76:0c:ed:1c:53:84:86:2d:5f:0c:1a: 6d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C9:E3:A8:12:47:17:17:18:63:EE:90:9B:F4:5E:86:72:B1:B7:0A X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1dc960e7-1590-4f72-857b-d680ff4ade7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:547::/48 Signature Algorithm: sha256WithRSAEncryption 1d:d8:8e:50:70:53:75:d4:f7:c4:19:06:04:7d:14:c8:47:11: 81:c6:f3:5f:3d:44:82:ac:34:27:9f:28:04:bb:a2:12:31:23: 7f:5a:d2:b2:6f:e4:ad:f3:fc:2a:d6:d5:25:58:f7:ca:12:a3: dc:ee:6f:7c:e7:cd:8a:16:c3:50:99:b2:e2:bb:7a:81:b9:4c: 21:6a:10:72:52:75:b1:8a:84:3a:7d:18:26:4d:59:9b:05:06: 92:4a:81:42:b6:1d:15:86:8d:7b:51:3f:bd:07:12:e6:5b:dc: f8:2b:53:c8:11:c1:a2:fa:e5:2c:59:07:3a:1d:1c:74:2c:e2: 78:dd:98:9a:44:8a:0b:56:df:02:55:2d:9d:fd:38:8d:b4:39: ac:9b:ae:d2:96:26:8f:ca:0c:aa:e1:6e:06:f9:e0:2c:fd:94: 15:e8:ef:97:3b:93:a9:b9:81:84:a2:71:88:3c:41:41:9d:f8: 02:30:5b:2a:b6:79:5d:c5:b8:7f:e2:69:02:7c:c8:f9:43:15: 3d:b0:28:d0:89:57:25:47:76:ae:5f:10:d6:bf:10:a2:57:f4: 10:99:bf:0a:56:e0:f2:ff:42:3b:74:83:8d:a1:c3:cc:2a:7c: 8f:a0:b8:04:04:65:07:41:20:20:77:f9:41:1f:9c:96:34:83: 49:03:65:19 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUHGTAwIfxSo4lR7C4ZkIkKnUJurQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNDI2MDA1MDIxWhcNMjUwNTMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDk2NTMwOGI5MGQ1ZWM5YjRiMmQ1ZGExZjIwNTEzMjBk ZjJlZjg5MDg3MzU1MTgyM2RhZjZkYjcwMzg5YzJjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCThYT2MMFRtCgRzVQXmY46XirnfuFeBCDdSIECOk9cJ00 oscVvoaLKdzdFhdsB5TMZeLHtiadF4zqy9+Y3EEAB1iS34LOHwv7oKjF3vY8gIGC IV7s4dFEmGjVHuCcYRryPTIcpMhlokdYYtHYMNNtZ1iZbVnahAJji+KMu3yBDYQG Rks264npuByMzAvye7LcwoDjRNN2g5vsjXqkdTj3WCEWMAmyLWJPAnGIDdNrpnDJ 1IAZVlDVUqPODYuEl8Oa9H128eoVWHeTIRYEy8taB9fiihh5wmf6S0+DgK92hWvp F6rxY8B8MZufqk9n1TZ7LpN2DO0cU4SGLV8MGm1BAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU5snjqBJHFxcYY+6Qm/RehnKxtwowHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzFkYzk2MGU3LTE1OTAtNGY3Mi04NTdiLWQ2ODBmZjRhZGU3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzABUcwDQYJKoZIhvcNAQELBQADggEBAB3YjlBwU3XU98QZBgR9FMhH EYHG8189RIKsNCefKAS7ohIxI39a0rJv5K3z/CrW1SVY98oSo9zub3znzYoWw1CZ suK7eoG5TCFqEHJSdbGKhDp9GCZNWZsFBpJKgUK2HRWGjXtRP70HEuZb3PgrU8gR waL65SxZBzodHHQs4njdmJpEigtW3wJVLZ39OI20OaybrtKWJo/KDKrhbgb54Cz9 lBXo75c7k6m5gYSicYg8QUGd+AIwWyq2eV3FuH/iaQJ8yPlDFT2wKNCJVyVHdq5f ENa/EKJX9BCZvwpW4PL/Qjt0g42hw8wqfI+guAQEZQdBICB3+UEfnJY0g0kDZRk= -----END CERTIFICATE-----Generated at Sat Apr 26 15:59:48 2025 by rpki-client